Category: podcast

Google defeats multifactor authentication, Pixel Watch is unrepairable, Ring sells a pet collar, Toyota learns the value of IT, and yet another vulnerability in the Internet

Links

Retool MFA defeated by Google convenience
https://retool.com/blog/mfa-isnt-mfa/

Pixel Watches are unrepairable
https://www.theverge.com/23874281/google-pixel-watch-cracks-no-repairs-warranty

Ring Pet Tag
https://www.yahoo.com/lifestyle/ring-launches-brand-pet-tag-141824261.html

Toyota manufacturing goes down. Dude named Ben about to get fired.
https://www.techspot.com/news/100067-toyota-insufficient-disk-space-blunder-brings-car-manufacturing.html

Critical WebP vulnerability
https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/

Tags 2fa, authenticator, google, pixel-watch, retool, right-to-repair, ring, toyota, vulnerability, webp

podcast

Angry Tech News #76: Snappy Spyware

Post author By Ryan Bemrose
Post date September 12, 2023

Podcast: Play in new window | Download (Duration: 26:55 — 24.7MB)

Spyware hacked for good, Apple OS hacked for bad, Windows hacked, but it makes things better, OpenAI confirms AI detectors are crap, and Automobiles are now officially the worst product category for privacy

Links

WebDetetive spyware hacked
https://techcrunch.com/2023/08/26/brazil-webdetetive-spyware-deleted/

Windows bug improves performance
https://www.tomshardware.com/news/windows-file-explorer-bug-ironically-boosts-browsing-performance

Blastpass vuln in Apple OS’s
https://arstechnica.com/gadgets/2023/09/apple-patches-clickless-0-day-image-processing-vulnerability-in-ios-macos/
https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/

OpenAI: “Do AI Detectors Work?”
https://help.openai.com/en/articles/8313351-how-can-educators-respond-to-students-presenting-ai-generated-content-as-their-own

Mozilla reviews automakers for privacy practices
https://foundation.mozilla.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/

Tags apple, explorer, openai, privacy, spyware, webdetetive, windows, zero-day

podcast

Angry Tech News #75: Plonked Stratum

Post author By Ryan Bemrose
Post date September 5, 2023

Podcast: Play in new window | Download (Duration: 19:38 — 18.0MB)

Breaches, breaches, breaches! Google solves meetings. And a Microsoft service becomes a liability in time

Links

UMich attack
https://www.detroitnews.com/story/news/local/michigan/2023/08/30/um/70716806007/

Forever 21 breach
https://techcrunch.com/2023/08/31/forever-21-data-breach-half-million/

Callaway breach
https://www.bleepingcomputer.com/news/security/golf-gear-giant-callaway-data-breach-exposes-info-of-11-million/

Google Duet AI vs meetings
https://metro.co.uk/2023/08/31/googles-ai-will-go-to-your-boring-meetings-for-you-19423340/

Windows Secure Time feature
https://arstechnica.com/security/2023/08/windows-feature-that-resets-system-clocks-based-on-random-data-is-wreaking-havoc/

Tags ai, callaway, forever21, google, meetings, microsoft, ntp, time, u-michigan

podcast

Angry Tech News #74: Terabyte Windmills

Post author By Ryan Bemrose
Post date August 29, 2023

Podcast: Play in new window | Download (Duration: 22:28 — 20.6MB)

Western Digital and Hewlett Packard facing lawsuits, Dropbox ends unlimited storage, Microsoft uses the word “python” a lot, and IoT devices continue to be a security nightmare

Links

NPR listens to ATN (maybe)
https://www.npr.org/2023/08/26/1195695051/driverless-cars-san-francisco-waymo-cruise
https://techcrunch.com/2023/08/18/cruise-told-by-regulators-to-immediately-reduce-robotaxi-fleet-50-following-crash/

Western Digital faces lawsuits over crappy SSD products
https://www.techspot.com/news/99831-western-digital-faces-class-action-lawsuit-over-failing.html

HP faces lawsuits over shady ink drivers
https://www.theregister.com/2023/08/11/judge_denies_hps_request_to/

Cloud “Python” coming to Excel
https://techcommunity.microsoft.com/t5/microsoft-365-blog/introducing-python-in-excel-the-best-of-both-worlds-for-data/ba-p/3905482

Dropbox dumps unlimited storage
https://blog.dropbox.com/topics/product/updates-to-our-storage-policy-on-dropbox-advanced
https://www.chia.net/chia-farming/

TP-Link smartbulb vulnerability
https://www.bleepingcomputer.com/news/security/tp-link-smart-bulbs-can-let-hackers-steal-your-wifi-password/

Tags chia, cruise, dropbox, excel, hewlett-packard, internet-of-things, microsoft, python, tp-link, western-digital

podcast

Angry Tech News #73: Identity Bubble

Post author By Ryan Bemrose
Post date August 22, 2023

Podcast: Play in new window | Download (Duration: 28:29 — 26.1MB)

News Flash: CAPTCHAs are worthless! Plus, Food AI wants to kill us all. Microservices security is more scary and complicated than we imagined. And copyrights are eroding our culture

Links

Bots can solve CAPTCHAS faster than humans
https://www.theregister.com/2023/08/15/so_much_for_captcha_then/

NZ supermarket chain Pak ‘n’ Save AI meal planner suggests poison recipes
https://www.techspot.com/news/99750-supermarket-ai-meal-planner-suggests-chlorine-gas-ant.html

Shadow Access Impact Report
https://stackidentity.com/wp-content/uploads/2023/08/Shadow-Access-Impact-Report.pdf

Music labels only want culture preserved if they can control it
https://www.engadget.com/sony-and-other-music-labels-sue-internet-archive-for-digitizing-old-records-110108988.html